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(b) All the claims are believed to be directed to a single invention. If the 
Office determines that all the claims presented are not obviously directed to a single 
invention, then Applicants will make an election without traverse as a prerequisite to the 
grant of special status. 

(c) Pre-examination searches were made of U.S. issued patents, including 
a classification search and a computer database search. The searches were performed on or 
around August 31, 2004, and were conducted by a professional search firm, Kramer & 
Amado, P.C. The classification search covered Classes 370 (subclasses 401, 466, 467, and 
469) and 709 (subclasses 203, 223, 229, 230, 231, 232, 246, and 250) for the U.S. and foreign 
subclasses identified above. The computer database search was conducted on the USPTO 
systems EAST and WEST. The inventors further provided five references considered most 
closely related to the subject matter of the present application (see references #5-9 below), 
which were cited in the Information Disclosure Statement filed with the application on March 
31, 2004 and on July 8, 2004. 

(d) The following references, copies of which are attached herewith, are 
deemed most closely related to the subject matter encompassed by the claims: 

(1) U.S. Patent No. 6,683,883; 

(2) U.S. Patent Publication No. 2004/0019686 Al; 

(3) U.S. Patent PubUcation No. 2003/0149829 Al ; 

(4) U.S. Patent Publication No. 2004/0148376 Al; 

(5) U.S. Patent Publication No. 2003/0140193 Al ; 

(6) Japanese Patent Publication No. JP 2000-276406; 

(7) Japanese Patent Publication No. JP 2002-318725; 

(8) Julian Salran & Kabnan Meth, IBM, "IP Storage Working 
Group icscl," January 19, 2003; and 
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(9) CISCO, "Cisco SN5428 Storage Router Software 

Configuration Guide, Chapter 1," SN 5428 Storage Router 
Overview, www.ietf.org. 

(e) Set forth below is a detailed discussion of references which points out 
with particularity how the claimed subject matter is distinguishable over the references. 

A. Claimed Embodiments of the Present Invention 

The claimed embodiments relate to a network converter and an information 
processing system. 

Independent claim 1 recites an information processing system comprising an 
information processing device; a storage device which has a plurality of storage areas and a 
storage section storing a security management table for registering information about access 
enable/disable to each of the plurality of storage areas from the information processing 
device; a network converter connected to the information processing device and the storage 
device so as to be communicable; and a management terminal connected to the storage device 
and the network converter so as to be communicable. The network converter comprises a 
first protocol conversion section which converts data received from the information 
processing device according to a first protocol into data having a form determined by a Fibre 
Channel protocol and transmits the data to the storage device; a second protocol conversion 
section which converts data received from the storage device according to the Fibre Channel 
protocol into data having a form determined by the first protocol and transmits the data to the 
information processing device; a conversion table storage section which stores in a 
conversion table a combination of a first identification number which is a number for 
identifying the information processing device and the storage device according to the first 
protocol, and a second identification number which is a number for identifying the 
information processing device and the storage device according to the Fibre Channel 
protocol; a first identification number conversion section which converts the first 
identification nimiber into the second identification number in accordance with contents 
stored in the conversion table; and a second identification niunber conversion section which 
converts the second identification number into the first identification number in accordance 
with contents stored in the conversion table. The management terminal notifies the storage 
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device of information about access enable/disable to each of the plurality of storage areas 
from the information processing device, determines a combination of the first identification 
number and the second identification number related to each of the information processing 
device and the storage device based on the information about the access enable/disable and 
notifies the network converter of information about the combination of the first identification 
number and the second identification number. 

Independent claim 7 recites a network converter connected to an information 
processing device and a storage device so as to be communicable. The network converter 
comprises a first protocol conversion section which converts data received from the 
information processing device according to a first protocol into data having a form 
determined by a Fibre Channel protocol and transmits the data to the storage device ; a 
second protocol conversion section which converts data received from the storage device 
according to the Fibre Channel protocol into data having a form determined by the first 
protocol and transmits the data to the information processing device; a conversion table 
storage section which stores in a conversion table a combination of a first identification 
niunber which is a number for identifying the information processing device and the storage 
device according to the first protocol, and a second identification number which is a number 
for identifying the information processing device and the storage device according to the 
Fibre Channel protocol; a first identification number conversion section which converts the 
first identification nvmiber into the second identification number in accordance with contents 
stored in the conversion table; and a second identification number conversion section which 
converts the second identification number into the first identification number in accordance 
with contents stored in the conversion table. 

B. Discussion of the References 

None of the following references disclose a network converter that includes a 
conversion table storage section which stores in a conversion table a combination of a first 
identification nimiber which is a number for identifying the information processing device 
and the storage device according to the first protocol, and a second identification number 
which is a number for identifying the information processing device and the storage device 
according to the Fibre Channel protocol; a first identification nimiber conversion section 
which converts the first identification number into the second identification number in 
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accordance with contents stored in the conversion table; and a second identification number 
conversion section which converts the second identification number into the first 
identification number in accordance with contents stored in the conversion table. 

The references fiirther fail to teach a management terminal that notifies the 
storage device of information about access enable/disable to each of the plurality of storage 
areas fi-om the information processing device, determines a combination of the first 
identification niraiber and the second identification number related to each of the information 
processing device and the storage device based on the information about the access 
enable/disable and notifies the network converter of information about the combination of the 
first identification number and the second identification number. 

1. U.S. Patent No. 6,683,883 

This reference discloses an ISCSI-FCP gateway for transferring information 
between an iSCSI device operating under an iSCSI protocol within a TCP/IP network and a 
SCSI over Fiber Channel (FCP) device operating imder an FCP protocol within an FC 
network. 

2. U.S. Patent Publication No. 2004/0019686 Al 

This reference discloses a switching node apparatus for storage network and a 
method of accessing remote storage apparatus with a protocol conversion such as the iSCSI 
for mapping the SCSI used in the SAN into the IP, FCIP (Fibre Channel over TCP/IP) for 
tunneling FCP to the IP network, and an iFCP (Internet Fibre Channel Protocol). See [0063]. 

3. U.S. Patent Publication No. 2003/0149829 Al 

This reference discloses an implicit addressing sequential media drive with 
intervening converter simulating explicit addressing to host applications with a 
router/gateway or another known construct utilized to convert between different protocols. 
For example, the converter 108 may convert between iSCSI or SCSI protocol fi-om the 
network 106 and Fibre Channel protocol at the device. See [0026]. 
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4. U.S. Patent Publication No. 2004/0148376 Al 

This reference discloses a storage area network processing device combining 
the iSCSI protocol stack with the Fibre Channel protocol stack and translating between the 
two to achieve iSCSI-FC gateway functionality. See [0036]. 

5. U.S. Patent Publication No. 2003/0140193 Al 

This reference relates to methods, apparatus and systems for virtualization of 
iSCSI storage. Virtual storage isolates the clients from the management of physical storage 
resources. Each physical storage device supports multiple logical xmits (LUNs). Each 
supported LUN is associated with a separate TCP port number and iSCSI commands received 
on a given port implicitly refer to the associated LUN. An iSCSI host addresses each logical 
unit of storage (LUN) with a virtual IP address and port nxmiber. Using an address 
translation table, the virtualization gateway rewrites the destination IP address in the header 
of an incoming packet as well as the destination port number to correspond to the target 
physical LUN. Migration of logical units across physical storage devices is supported by 
changing the address translation entries at the gateway; and the gateway can be provided by a 
standard network router with support for address translation. 

6. Japanese Patent Publication No. JP 2000-276406 

This reference discloses a technique to prevent illegal access by selectively 
limiting access from a host device to a storage area in a storage subsystem. The storage 
subsystem 1201 is connected to the host device 1203 by a port 1202 which has multiple fiber 
channel interfaces. The storage subsystem 1201 has a communication control part 1211, and 
sends and receives information to and from a communication control 1214 to a device 1213 
for maintenance through a communication line 1212 to maintain the storage subsystem 1201, 
and also set whether or not the host device 1203 is allowed to gain access by relating N-Port- 
Name and a specific storage area of LU 1210 with each other. Through the setting, access 
from the host device 1203 to the specific storage area in the storage subsystem 1201 is 
selectively limited. Consequently, illegal access can be prevented. 
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7. Japanese Patent Publication No. JP 2002-318725 

This reference relates to a technique to provide a security function equal to a 
conventional LUN security in a disk array connected to a network by iSCSI technology. The 
system is provided with means for holding a plurality of IP addresses inside the disk array, 
means for making the IP address correspond to an LU, and means for filtering transfer by 
watching the IP address to be used for transfer. Then the IP address is made to correspond to 
the LU and the permission/no permission of transfer is set for every set IP addresses by a 
managing terminal; thus the filtering based on the IP address corresponding to the LU is 
realized on the disk array and a router. 

8. Julian Salran & Kalman Meth. IBM, "IP Storage Working Group icscL" 

January 19. 2003 

This reference relates to details of the iSCSI (internet Small Computer 
Systems Interface) protocol which is used between an information processing device and a 
storage device. 

9. CISCO, "Cisco SN5428 Storage Router Software Configuration Guide. 
Chapter L" SN 5428 Storage Router Overview, www.ietf org 

This reference discloses a WWN allocation section that sequentially allocates 
WWNs, which are set in a WWN management table stored in a memory, to the respective 
information processing devices. Thus, a different WWN may be allocated to the same 
information processing device for each access. Consequently it is impossible to realize the 
LUN security using the WWNs in the storage device. Accordingly, the network converter 
includes the extended instruction issuing section which inserts an iSCSI name of the 
information processing device into an FC fi-ame. The FC fi"ame is not an instruction prepared 
in the Fiber Channel protocol. Thus, in order to realize the LUN security using the FC fi-ame, 
it is required that an extended instruction analysis section which analyzes the fi'ame is 
provided in the storage device. The extended instruction analysis section obtains the iSCSI 
name of the information processing device fi-om the FC fi-ame and controls the LUN security 
based on a security management table. See present specification at page 3, lines 3-21. 
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(f) In view of this petition, the Examiner is respectfully requested to issue 
a first Office Action at an early date. 

Respectfully submitted, 

Chun-Pok Leung 
Reg. No. 41,405 

TOWNSEND and TOWNSEND and CREW LLP 

Two Embarcadero Center, 8* Floor 

San Francisco, California 941 1 1-3834 

Tel: 650-326-2400 

Fax: 415-576-0300 

Attachments 

RL:rl 
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